Privacy Policy svip Malaysia –
Your Data Protection & Information Security

Svip Malaysia ("svip", "we", "Platform") values the privacy of every user who uses our services. This Privacy Policy is drafted to transparently explain how we handle the personal information you provide to us when registering, using, or interacting with the svip platform.

This policy applies to all svip platform users, including those who access it via the website at svip.ml, the official svip mobile app for Android and iOS, and any official svip support or communication channels.

We operate according to the following data protection principles, which form the foundation of all our data management practices:

• Fairness & Transparency – data is collected lawfully, fairly and transparently.
• Purpose Limitation – data is used only for the purposes stated at the time of collection.
• Data Minimisation – we only collect data that is strictly necessary.
• Accuracy – we take steps to ensure that stored data is accurate and up to date.
• Retention Limit – data is not retained longer than necessary.
• Integrity & Confidentiality – data is protected against unauthorised access, loss or damage.

If you do not agree with any part of this policy, please stop using the svip platform and contact our team for assistance with managing your account.

Svip collects various categories of data depending on how you interact with the platform. Generally, the data we collect falls into three main categories:

A. Data You Provide Directly

• Registration Information: full name, phone number, email address, date of birth, username and chosen password.
• Identity Verification Documents (KYC): a copy of your identity card (MyKad) or passport, proof of residential address such as a utility bill or recent bank statement.
• Financial Information: bank account details, e-wallet account numbers (Touch 'n Go, Boost, ShopeePay, GrabPay), and records of deposit and withdrawal transactions.
• Communications: messages sent via Live Chat, emails to the support team or any feedback you provide to us.

B. Data Collected Automatically

• Technical Data: IP address, web browser type and version, device operating system, screen resolution, and language settings.
• Usage Data: pages visited, time spent on each page, links clicked, games played and betting history.
• Location Data: approximate location based on IP address for security and regulatory compliance purposes.
• Cookie Data: session cookies and persistent cookies that help the platform remember your preferences and deliver a better experience.

C. Data From Third-Party Sources

• Identity verification information from third-party KYC service providers used to verify the authenticity of documents.
• Payment processing data from payment gateway providers we work with to process deposits and withdrawals.
• Blacklist screening information from relevant regulatory bodies or authorities as part of our compliance procedures.

Svip uses collected personal data only for legitimate and stated purposes. We will not use your data for any other purpose without obtaining your consent first, except as required by law.

Primary purposes for using your personal data:

• Identity Verification & KYC: verify that you meet the minimum age requirement of 18 years and confirm your true identity before fully activating your account.
• Service Delivery: process deposits, manage withdrawals, activate bonuses and promotions, and provide access to all games and betting markets.
• Account Security: detect and prevent unauthorised access, fraud, money laundering and any illegal activity relating to your account.
• Customer Support: handle enquiries, complaints and assistance requests you submit through any of our support channels.
• Regulatory Compliance: meet legal obligations, carry out required background checks and comply with directives from the relevant authorities.
• Platform Improvements: analyse usage patterns in aggregate to improve interface design, platform speed and the overall user experience.
• Marketing Communications: send you information about promotions, exclusive offers and platform updates – only if you have given consent to receive such communications.
• Responsible Gaming: monitor betting patterns to identify signs of problem gambling and provide appropriate support to users who need it.

Svip does not sell, rent, or disclose your personal data to third parties except in the limited circumstances set out below. Any data sharing is carried out on legitimate grounds and protected by strict confidentiality agreements.

Categories of third parties that may receive your data:

• KYC Service Providers: third-party identity verification companies we use to process and validate your identification documents. They receive only the data necessary for the verification process.
• Payment Gateway Providers: financial institutions, banks and e-wallet providers that process your deposit and withdrawal transactions. This data sharing is necessary to complete each transaction.
• Game Software Providers: gaming technology companies that provide the Slots platform, Live Casino and sports software integrated with svip. Required game transaction data is shared to ensure smooth game functionality.
• IT & Security Service Providers: companies that provide server infrastructure, cloud services, security monitoring and protection against cyberattacks.
• Regulatory Authority: government agencies, law enforcement bodies, or judicial authorities when required by Malaysian law or a valid court order.
• Auditors & Professional Consultants: audit firms, lawyers or consultants engaged in compliance assessments or legal proceedings relating to svip operations.

All third parties we work with are required to comply with data security standards equal to or higher than those we apply ourselves. We periodically review data sharing agreements with all our third-party partners.

Svip retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or for as long as required by applicable laws and regulations. The following is a general guide to data retention periods:

• Active Account Data: retained for the duration your account remains active and in good standing.
• Data After Account Closure: at least five years after account closure for compliance with anti-money laundering (AML) laws and financial reporting requirements.
• Financial Transaction Records: minimum seven years in line with Malaysia's financial regulatory requirements.
• Support Communication Records: three years from the date of the last communication.
• Security Logs: twelve months to allow investigation of security incidents if required.

Technical security measures we have implemented:

• 256-bit SSL/TLS Encryption for all data transmitted between users and our servers.
• Encryption at rest for all databases containing users' personal information.
• Role-based access control (RBAC) – only svip staff who require access to specific data to perform their duties will be granted that access.
• Two-factor authentication (2FA) for all administrative access to svip's internal systems.
• 24/7 continuous security monitoring with intrusion detection systems (IDS) and next-generation firewalls.
• Penetration testing periodically by independent security specialists to identify and address any system vulnerabilities.
• Encrypted data backups automatically to a secure, geographically separate location.

While we take all reasonable precautions, no security system in the world is completely impenetrable. We encourage users to also play their part in keeping their accounts secure by using strong passwords, enabling two-factor authentication, and not sharing login credentials with anyone.

Svip uses cookies and similar tracking technologies to enhance the user experience on our platform. Cookies are small text files stored on your device when you visit the svip platform.

Types of cookies we use:

• Essential Cookies: required for core platform functions such as login authentication, session management and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: collect information on how users use the platform, the most frequently visited pages and any error messages received. All data is collected in aggregate and anonymised.
• Functional Cookies: remember your preferences such as display language, account settings and game preferences to deliver a more personalised experience.
• Analytics Cookies: help us understand overall platform usage patterns for product and service improvement purposes.

You can manage or disable cookies through your web browser settings at any time. Please note, however, that disabling certain cookies may affect platform functionality and your overall user experience. Essential cookies cannot be fully disabled if you wish to continue using the svip platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and svip's internal policies, you have the following rights regarding your personal data:

• Right to Access: you have the right to request a copy of the personal data we hold about you. We will provide the data within 14 working days from the date of the request.
• Right to Rectification: if your personal data is inaccurate, outdated or incomplete, you have the right to request that we correct or update it.
• Right to Erasure: you may request the deletion of your personal data under certain circumstances, subject to our legal data retention obligations which may override this right in some situations.
• Right to Restrict Processing: in certain circumstances, you may request that we restrict the processing of your personal data while a dispute is being resolved.
• Right to Object: you have the right to object to the processing of your personal data for direct marketing purposes at any time.
• Right to Withdraw Consent: where data processing is based on your consent, you have the right to withdraw that consent at any time, without affecting the validity of any processing that took place prior to the withdrawal.

To submit any request relating to your privacy rights, please contact svip's Data Protection Officer by email at [email protected] or through our official support channels. We will process your request within seven to fourteen business days depending on the complexity of the request.

The svip Platform is exclusively for individuals aged 18 and above. We do not intentionally collect, process, or store any personal data from individuals under the age of 18.

If you believe that we have inadvertently collected personal data from someone under the age of 18, please contact us immediately at [email protected]. We will take immediate action to delete that data from our systems.

As part of our KYC procedure, all new users are required to verify their age by submitting a valid identification document. This process serves as our primary line of defence against access by underage individuals.

The svip platform may contain links or references to third-party websites or services in certain contexts, such as payment providers or game providers. svip's Privacy Policy does not cover the privacy practices of any such third-party website or service.

Each third-party website has its own privacy policy that is separate and independent from svip. We encourage you to read and understand the privacy policy of any third-party platform you visit or use in connection with svip's services.

Svip is not responsible for the content, privacy practices, or security of any third-party website. Your use of any third-party website is entirely at your own risk and subject to their own terms and privacy policies.

Svip reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or improvements to the platform's services. The latest version of the Privacy Policy will always be published on this page with a clear update date.

When we make significant changes to this Privacy Policy, we will take the following steps to notify users:

• Displaying a clear notice on the svip platform's home page for at least 14 days after the changes take effect.
• Sending email notifications to all registered users with active accounts.
• In cases of very significant changes, we may request renewed consent from you before you can continue using the platform.

Continued use of the svip platform after any Privacy Policy changes take effect will be considered acceptance of the updated Privacy Policy. If you do not agree with any changes, you have the right to close your account and stop using the platform at any time.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact the svip Data Protection Officer through the following channels:

We are committed to responding to every privacy-related enquiry seriously and within a reasonable timeframe. Your satisfaction and trust are svip's highest priority across all aspects of our operations.